BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.
Programs / CLEAR

In brief. CLEAR is a bug bounty program on HackerOne. Its critical reports have paid an average of $15,000 across 3 reports (HackerOne figures, November 8, 2026). It received 139 reports in the 90 days to November 8, 2026, about 5.3 per in-scope asset. As of Nov 8, 2026. Markdown for agents

NR Unrated

CLEAR

CLEAR HackerOne
3 more reviews needed for a grade
Write a review
Program page hackerone.com ↗
Claim this company profile

Work at CLEAR? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Program metrics HackerOne, published

These are HackerOne’s own figures for this program, taken from its public page. Researchers did not report them, and they don't count toward the BugRater grade. Captured 8 Nov 2026.

What it pays, by severity

Critical $15,000 avg 3 reports thin
High $1,100 avg 8 reports indicative
Medium $750 avg 14 reports indicative
Low $200 avg 23 reports indicative

$75,414 paid to researchers in total, $17,050 of it in the last 90 days. This is HackerOne’s lifetime figure. It shows the program has paid out before. It doesn't tell you what any one report will get.

Intake & responsiveness, last 90 days

Reports received
139
in 90 days
Resolved
101
all time, last one 2 months ago
Participants
91
hunters engaged
Response efficiency
83%
meeting its targets, HackerOne’s figure
SLA misses
0
targets missed
Reports received, day by day, last 30 days 130–177
9 Oct 139 reports 8 Nov

Response targets it sets itself

First response
2 days
Triage
10 days
Bounty
30 days
Resolution
30 days

These are targets the program set. They don't show whether it meets them.

Barriers to submitting

Open to submit. HackerOne lists no requirements for submitting a report here.

Over 80 days (55 snapshots): intake down 127 reports; response efficiency down 7 points; 90-day payout up $14,400.

See how this program’s report load compares to others

Reviews

0 published

No reviews yet.

Be the first to review

Who this program credits

91 credited

Researchers HackerOne shows on this program’s public thanks list, best position first. “Recognised” is how many of a hunter’s submissions the program accepted; the ratio is their signal here, not our judgement of them.

# Researcher Reputation Recognised / submitted
1 dawidczagan 614 27 / 35 77%
2 godiego 161 2 / 4 50%
3 gerben_javado 154 7 / 8 88%
4 schoobydrew 118 2 / 2 100%
5 todayisnew 116 4 / 8 50%
6 mbz0x7 114 2 / 2 100%
7 mikkz 110 5 / 5 100%
8 bugschopper 103 4 / 5 80%
9 0x4d5341 89 1 / 3 33%
10 chernobyl 87 6 / 7 86%
11 stealthy 79 2 / 2 100%
12 shubs 78 1 / 8 13%
13 harisec 76 3 / 3 100%
14 nrockhouse 64 2 / 2 100%
15 savagecw 62 1 / 1 100%
16 bsysop 57 1 / 2 50%
16 ian 57 0 / 0
16 johnh4x0r 57 1 / 1 100%
16 mahfujwhh 57 0 / 1 0%
16 mux0x 57 1 / 1 100%
16 nayefhamouda 57 1 / 1 100%
16 r4jve3r 57 1 / 1 100%
16 sam_exploit 57 1 / 2 50%
24 predator_97 54 2 / 2 100%
25 theokeen 44 0 / 1 0%

Showing the top 25 of 91 credited on HackerOne.

Program profile HackerOne, imported

HackerOne published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 8 Nov 2026.

CLEAR's mission is to create frictionless experiences. CLEAR's identity platform is transforming the way people live, work, and travel.

Responsiveness
83% HackerOne’s figure
Swag
No
Currency
USD
Submissions
Open
Launched
Mar 2026
Scope entries
30 HackerOne’s count

Scope

30 assets
AssetTypeEligibilityMax severity
authentication.clearme.com URL ✓ bounty Critical
clearme.atlassian.net URL ✓ bounty High
clearme.com URL ✓ bounty Critical
com.clearme.Clear OTHER IPA ✓ bounty Critical
com.clearme.clearapp OTHER APK ✓ bounty Critical
Show all 30 assets
AssetTypeEligibilityMax severity
concierge.clearme.com URL ✓ bounty Critical
enroll.clearme.com URL ✓ bounty Critical
http://verified.clearme.com/dashboard URL ✓ bounty Critical
https://verified.clearme.com/v1/verification_sessions API ✓ bounty Critical
https://www.clearme.com/partners/ URL ✓ bounty High
https://www.clearme.com/sports/lafc URL ✓ bounty High
https://www.clearme.com/sports/mariners URL ✓ bounty High
https://www.clearme.com/sports/mets URL ✓ bounty High
https://www.clearme.com/sports/rockies URL ✓ bounty High
https://www.clearme.com/sports/tigers URL ✓ bounty High
https://www.clearme.com/sports/yankees URL ✓ bounty High
identity.clearme.com URL ✓ bounty Critical
ir.clearme.com URL ✓ bounty Critical
mobile.clearme.com URL ✓ bounty Critical
my.clearme.com URL ✓ bounty Critical
scan.clearme.com URL ✓ bounty Critical
sports.clearme.com URL ✓ bounty Critical
verified.clearme.com URL ✓ bounty Critical
verified.clearme.com/v1/verification_sessions API ✓ bounty Critical
web-edge.clearme.com URL ✓ bounty Critical
www.clearme.com URL ✓ bounty Critical
docs.clearme.com URL out None
fieldsupport.clearme.com URL out None
hub.clearme.com URL out None
legal.clearme.com URL out None